Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add skills/andreaserradev-gbj/dev-workflow/dev-dashboardnpx skills add andreaserradev-gbj/dev-workflow --skill dev-dashboardgit clone --depth 1 https://github.com/andreaserradev-gbj/dev-workflowWhat it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00046 | $0.00401 |
| Opus 5 | $0.00023 | $0.00200 |
| Sonnet 5 | $0.00009 | $0.00080 |
| Haiku 4.5 | $0.00005 | $0.00040 |
Grade A, and why
dev-dashboard scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
What it actually says
Start Dev Dashboard
Start the dev-dashboard server (or reuse an existing instance) and display the URL.
The dashboard runs entirely from the bundled launcher in this skill — there is no
~/.local/bin install step and no command shims to manage.
Step 1: Launch
Run the bundled start script directly by absolute path:
bash "$SCRIPTS/start.sh" --open
Where $SCRIPTS is the absolute path to scripts/ within this skill's directory. Use $HOME instead of literal home paths.
start.sh resolves the bundled server relative to its own location, reuses an
already-running instance if one is found (matched across plugin versions), or
starts a fresh one on the configured port (falling back to a nearby free port).
--open also opens the dashboard in the browser. The server binds to 127.0.0.1
(localhost only) by default.
To stop the server, run the bundled stop script:
bash "$SCRIPTS/stop.sh"
Step 2: Parse Output and Report
The launch command outputs one of:
running:<port>— server was already runningstarted:<port>— new server startederror:<message>— something went wrong
On success, display:
Dev Dashboard: http://localhost:<port>
If it was already running, add "(already running)".
On error, show the error message.
If the error came from the launch command, suggest checking /tmp/dev-dashboard.log.
What ships with it
14 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
- dashboard/client/assets/index-BXvuNVOi.js 133 KB runs code
- dashboard/client/assets/index-Dn_pt6bm.css 44 KB
- dashboard/client/icons/icon-192.png 15 KB
- dashboard/client/icons/icon-512.png 17 KB
- dashboard/client/icons/icon-maskable-512.png 17 KB
- dashboard/client/icons/icon.svg 1003 B
- dashboard/client/index.html 1.2 KB
- dashboard/client/manifest.json 724 B
- dashboard/client/offline.html 4.7 KB
- dashboard/client/sw.js 963 B runs code
- dashboard/server/index.cjs 943 KB runs code
- scripts/read-port.cjs 910 B runs code
- scripts/start.sh 4.6 KB runs code
- scripts/stop.sh 2.0 KB runs code
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 2d ago First seen · 55 lines · 46 tokens per session scan A 2d3606d42746
dev-dashboard is a skill published in the GitHub repository andreaserradev-gbj/dev-workflow (2 stars, last pushed 5d ago), licensed MIT. It adds 46 tokens to every session and 401 once invoked, about $0.0002 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
gsd-debug
Systematic debugging with persistent state across context resets.
gsd-code-review
Review source files changed during a phase for bugs, security issues, and code quality problems.
gsd-config
Configure GSD settings — workflow toggles, advanced knobs, integrations, and model profile.
gsd-execute-phase
Execute all plans in a phase with wave-based parallelization.
gsd-docs-update
Generate or update project documentation verified against the codebase.
gsd-ai-integration-phase
Generate an AI-SPEC.md design contract for phases that involve building AI systems.